Hackers begin mass-exploiting Ivanti VPN zero-day flaws

Security researchers report mass exploitation of two zero-day vulnerabilities in Ivanti Connect Secure VPN appliances (CVE-2023-46805, CVE-2024-21887), attributed to China-backed APT activity (UTA0178 and additional groups), with evidence of at least 1,700 compromised devices worldwide across critical sectors; Ivanti has yet to publish patches and advises mitigations while researchers warn that public proof-of-concept code could broaden impacts.